Fail to enable repository with 'Errno::ECONNRESET: Connection reset by peer - SSL_connect' in Satellite 6

Solution Verified - Updated -

Environment

  • Red Hat Satellite 6

Issue

  • Fail to enable repository with Errno::ECONNRESET: Connection reset by peer - SSL_connect in foreman tasks logs on Red Hat Satellite 6
  • Error refreshing manifest
`Errno::ECONNRESET: Connection reset by peer - SSL_connect`

Resolution

  • Connection reset by peer - SSL_connect is due to TLS version 3 is not allowed through the firewall. Allow TLS v3 and ssl_version = SSLv23 from firewall.

For more KB articles/solutions related to Red Hat Satellite 6.x Repository Issues, please refer to the Red Hat Satellite Consolidated Troubleshooting Article for Red Hat Satellite 6.x Repository Issues.

Root Cause

  • TLS version 3 is not allowed through the firewall.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments